Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/mUz__U_PTME89cXwg7JRGzIGu08.roa
File: mUz__U_PTME89cXwg7JRGzIGu08.roa (raw, json)
Hash identifier: X3i358+zNX5mM042V343Jn8EhF3HggGUbvOlvcTwdX4=
Subject key identifier: 99:4C:FF:FD:4F:CF:4C:C1:3C:F5:C5:F0:83:B2:51:1B:32:06:BB:4F
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 018D1231DC31C40B1BB98A33C9295BFEC6DE
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/mUz__U_PTME89cXwg7JRGzIGu08.roa
Signing time: Tue 16 Jan 2024 12:14:33 +0000
ROA not before: Tue 16 Jan 2024 12:14:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39662
IP address blocks: 87.239.120.0/21 maxlen: 24
87.239.121.0/24 maxlen: 24
93.190.96.0/21 maxlen: 24
93.190.102.0/23 maxlen: 23
2a00:13f0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:31:dc:31:c4:0b:1b:b9:8a:33:c9:29:5b:fe:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Jan 16 12:14:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=994cfffd4fcf4cc13cf5c5f083b2511b3206bb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:2b:02:ff:b9:23:50:5f:84:88:5d:ab:d0:
43:c6:f6:fc:9c:4a:e3:30:05:0c:54:ec:60:09:99:
8e:9d:4d:cb:0f:18:51:97:db:d9:5d:6b:4a:21:73:
4d:02:0c:7f:74:e8:a2:23:d3:d4:cd:aa:32:fb:5d:
db:f6:75:4f:71:34:74:66:c6:70:07:c5:59:3b:53:
f2:74:b7:72:a6:ea:60:34:f0:6c:a0:7b:90:56:1c:
f9:94:42:3e:9e:ac:3e:d3:71:85:1c:5b:9c:13:d8:
0b:29:48:54:3a:dd:cf:db:52:c6:7f:d2:cb:41:54:
4e:eb:69:95:93:34:a3:76:32:42:9a:0d:67:60:de:
07:d2:20:d2:17:71:ee:b0:60:bd:a0:3d:6d:25:b5:
c4:c1:25:70:77:d3:0b:24:4e:a8:be:72:9f:bd:24:
a6:96:8c:80:9c:17:f8:f6:a9:da:28:0d:60:26:fb:
8e:73:94:dc:ad:d9:5f:03:e0:d0:94:0f:d0:db:7c:
ff:49:a0:56:6b:54:aa:86:b3:d3:d9:b5:61:d9:1e:
4d:18:fe:70:8c:5d:f2:74:1a:22:a4:60:2e:f7:bc:
e0:11:94:40:6a:ae:1d:67:36:88:5c:5e:b7:1d:2e:
8c:7e:ad:e4:35:62:7e:42:84:d9:8f:15:f0:ef:19:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:FF:FD:4F:CF:4C:C1:3C:F5:C5:F0:83:B2:51:1B:32:06:BB:4F
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/mUz__U_PTME89cXwg7JRGzIGu08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.120.0/21
93.190.96.0/21
IPv6:
2a00:13f0::/32
Signature Algorithm: sha256WithRSAEncryption
08:00:5a:f9:0e:c0:d9:0f:a1:18:9d:00:24:00:5b:bb:41:be:
49:9c:45:6f:0e:17:e0:87:65:67:34:a1:3a:79:08:71:a0:35:
a5:69:0c:71:3e:56:bd:8e:ad:bf:97:30:3b:87:1b:f7:c4:19:
3f:56:1c:a9:68:ff:f9:05:16:50:07:77:81:15:a7:0e:80:66:
e8:3a:08:a3:52:98:80:e3:8d:08:69:9b:05:f7:c2:69:70:d7:
b0:be:14:27:af:54:92:d3:ac:e7:df:7c:35:d0:d3:90:f7:77:
88:e4:d0:d5:01:a9:af:07:21:08:76:a5:75:70:b7:e2:54:ac:
d8:53:6c:58:78:ed:86:f3:7b:0e:79:40:ed:0c:42:4f:e4:ef:
cf:bc:67:01:08:67:eb:d0:4a:86:c2:76:a8:71:bf:55:7d:6d:
89:08:ec:1c:88:16:e2:93:0b:32:e5:2b:56:97:5e:aa:cb:42:
01:83:47:0f:ab:bb:f3:37:01:da:3e:56:97:d0:bc:6a:31:83:
d3:c8:ec:de:44:4c:15:b2:c1:95:b4:b9:0b:72:61:db:8d:45:
42:75:d4:5b:a6:13:84:42:c4:ea:14:4e:e2:ea:f0:e3:f8:cc:
a5:66:5a:ca:bf:25:b5:88:ac:7c:26:f6:98:71:2e:c1:de:a4:
4f:6c:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:15 2024 by rpki-client on console-ams.rpki-client.org